Searched hist:206396 (Results 1 - 1 of 1) sorted by relevance

/freebsd-11-stable/lib/libc/gen/
H A Dsem_new.cdiff 294565 Fri Jan 22 12:55:00 MST 2016 jilles sem: Don't free nameinfo that is still in list when open() fails.

This bug could be reproduced easily by calling sem_open() with O_CREAT |
O_EXCL on a semaphore that is already open in the process. The struct
sem_nameinfo would be freed while still in sem_list and later calls to
sem_open() or sem_close() could access freed memory.

PR: 206396
MFC after: 5 days

Completed in 113 milliseconds